{"id":"AZL-108024","summary":"CVE-2024-2236 affecting package libgcrypt 1.11.3-1","details":"A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.","modified":"2026-10-16T06:06:48Z","published":"2024-03-06T22:15:57Z","upstream":["CVE-2024-2236"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2236"}],"affected":[{"package":{"name":"libgcrypt","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/libgcrypt"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.11.3-1"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-108024.json"}}],"schema_version":"1.9.0"}